[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frQxN7XlqBAU23L2GetNqzAorc4BSu0K9igWJAB-6Wqc":3,"$f8MNEaLWSifxYaRoU3hXJHlnuO1gpFDmH9b_PsUd-3Zg":244,"$fShyqrjRZFxXvW3L8PaYFLNATGG7VfYiBVqww5a9Dfys":248},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":36,"analysis":141,"fingerprints":227},"rolematrix-gw","RoleMatrix","1.0.1","Mohammadreza Maghsoudipour","https:\u002F\u002Fprofiles.wordpress.org\u002Fmaghsoudi\u002F","\u003Cp>RoleMatrix provides a comprehensive solution for managing WordPress user permissions with an intuitive interface designed for both beginners and advanced users.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Create Custom Roles\u003C\u002Fstrong> – Build unlimited custom user roles tailored to your specific needs\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Manage Capabilities\u003C\u002Fstrong> – Control what each role can and cannot do with a user-friendly checkbox interface\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hide Admin Menu Items\u003C\u002Fstrong> – Restrict visibility of specific admin pages based on user roles\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom URL Restrictions\u003C\u002Fstrong> – Block direct URL access to protected admin areas\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Role-Based Access Control\u003C\u002Fstrong> – Fine-grained control over every aspect of WordPress admin\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Perfect For:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Agencies managing multiple client sites\u003C\u002Fli>\n\u003Cli>Multi-author blogs and news sites\u003C\u002Fli>\n\u003Cli>E-commerce stores using WooCommerce\u003C\u002Fli>\n\u003Cli>Membership sites with different access levels\u003C\u002Fli>\n\u003Cli>Any WordPress site requiring advanced user management\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Plugin Integrations:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WordPress Core Roles\u003C\u002Fli>\n\u003Cli>WooCommerce (Shop Manager, Customer)\u003C\u002Fli>\n\u003Cli>Gravity Forms\u003C\u002Fli>\n\u003Cli>Rank Math SEO\u003C\u002Fli>\n\u003Cli>Duplicator Pro\u003C\u002Fli>\n\u003Cli>And more…\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Additional Information\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Support:\u003C\u002Fstrong> For support requests, please use the WordPress.org support forums.\u003Cbr \u002F>\n\u003Cstrong>Languages:\u003C\u002Fstrong> Currently supports English and Persian (Farsi) with full RTL support.\u003Cbr \u002F>\n\u003Cstrong>Compatibility:\u003C\u002Fstrong> Tested with WordPress 6.8 and PHP 8.2\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Security:\u003C\u002Fstrong> All inputs are sanitized and validated. Nonce verification on all forms. Administrator role is always protected.\u003C\u002Fp>\n","A powerful plugin to manage user roles, capabilities, and admin menu access with advanced URL restrictions.",0,219,"2025-12-06T15:07:00.000Z","6.8.5","5.8","7.4",[18,19,20,21,22],"access-control","admin-menu","capabilities","security","user-roles","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frolematrix-gw.1.0.1.zip",100,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"maghsoudi",2,30,94,"2026-05-19T19:22:30.686Z",[37,61,80,99,121],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":34,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":56,"download_link":57,"security_score":58,"vuln_count":59,"unpatched_count":11,"last_vuln_date":60,"fetched_at":27},"capability-manager-enhanced","PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus","2.42.0","PublishPress","https:\u002F\u002Fprofiles.wordpress.org\u002Fpublishpress\u002F","\u003Cp>PublishPress Capabilities is the access control plugin for WordPress. You can control all the capabilities and permissions on your WordPress site. We built this user role editor plugin so you have an easy and powerful way to manage user capabilities.\u003C\u002Fp>\n\u003Cp>You can use PublishPress Capabilities to \u003Cstrong>manage all your WordPress user roles\u003C\u002Fstrong>, from Administrators and Editors to Authors, Contributors, Subscribers and custom roles. Each user role can have the exact capabilities that your site needs.\u003C\u002Fp>\n\u003Cp>PublishPress Capabilities can clean up your post editing screen, admin area, and even the Profile screen. You can decide what authors see when they’re writing posts. You can \u003Cstrong>hide any feature on the Gutenberg or Classic Editor screens\u003C\u002Fstrong>. You can remove items in the WordPress dashboard and inside user accounts screens.\u003C\u002Fp>\n\u003Cp>The Pro version of PublishPress Capabilities has many extra features, including the ability to edit admin menu links, clean up the post editing screen, block admin pages by URL, and much more.\u003C\u002Fp>\n\u003Ch3>PublishPress Capabilities Pro\u003C\u002Fh3>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Upgrade to Capabilities Pro\u003C\u002Fstrong>\u003Cbr \u002F>\n  This plugin is the free version of PublishPress Capabilities. The Pro version of Capabilities has all the features you need to control permissions for your WordPress users. With Capabilities Pro you can manage access to posts, pages, media and custom post types. \u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fcapabilities\" title=\"Capabilities Pro\" rel=\"nofollow ugc\">Click here to control access to your WordPress site with Capabilities Pro!\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>The Key Features of PublishPress Capabilities\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Cstrong>Roles\u003C\u002Fstrong>: You can edit, create, duplicate any WordPress user role.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Capabilities\u003C\u002Fstrong>: You can control all WordPress and plugin capabilities.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Editor Features\u003C\u002Fstrong>: You decide what users see when they’re writing posts in Gutenberg or the Classic Editor.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin Features\u003C\u002Fstrong>: You can remove items from the WordPress admin, toolbar, and even dashboard widgets.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin Styles\u003C\u002Fstrong>: Customize the admin area with your own branding.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin Menus (Pro version)\u003C\u002Fstrong>: You can edit admin menu links and control who can access them.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Profile Features\u003C\u002Fstrong>: You can hide features for users in the “Profile” screen.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Redirects\u003C\u002Fstrong>: You can hide features for users in the “Profile” screen.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Frontend Features\u003C\u002Fstrong>: This feature allows you to modify the site’s frontend by hiding or adding CSS.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Navigation Menus\u003C\u002Fstrong>: You can restrict access to navigation menus by user role, or logged in status.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User Testing\u003C\u002Fstrong>: Safely test any user’s account without resetting their password.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin Notices\u003C\u002Fstrong>: Organize all the message and advertisements in your admin area.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Roles\u003C\u002Fh3>\n\u003Cp>PublishPress Capabilities gives you detailed control over all the permission levels on your WordPress site. You can edit user roles on your site, from Administrator and Editor to Contributor and Subscriber.\u003C\u002Fp>\n\u003Cp>With PublishPress Capabilities you can create or copy any existing WordPress user role. These roles can be customized in exactly the same way as the default WordPress roles. These new roles can be added to single sites or to an entire multisite network.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fcapabilities-screen\u002F\" rel=\"nofollow ugc\">Click here to see how to manage user roles\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Capabilities\u003C\u002Fh3>\n\u003Cp>With the Capabilities plugin, you can choose who can Publish, Read, Edit and Delete content. You can choose permissions for posts, pages, custom content types, categories, tags, and more.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fpermissions-start\u002F\" rel=\"nofollow ugc\">Click here to see how to manage capabilities\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Many WordPress users have sites with custom post types. This can be done using custom code, a theme, or with a plugin. No matter how your post type is created, PublishPress Capabilities lets you enforce and assign distinct capabilities for your post type.\u003C\u002Fp>\n\u003Cp>PublishPress Capabilities enables you to add extra permissions to the taxonomies on your site. This feature includes the default Categories and Tags, but also applies to other taxonomies. For example, in WooCommerce you can apply custom permissions to Product categories, Product tags, and Product shipping classes. You can enforce and assign “Manage”, “Edit” and “Assign” distinct capabilities for all your taxonomies.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Ftaxonomy-specific-capabilities\u002F\" rel=\"nofollow ugc\">Click here to learn about taxonomy permissions\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Editor Features\u003C\u002Fh3>\n\u003Cp>PublishPress Capabilities has an option called “Editor Features” allows you to clean up the post editing screen. You can decide what users see when they’re writing posts. You can hide anything on the Gutenberg or Classic Editor screens. You can hide boxes inside the sidebar such Tags, Categories, or Excerpt. You can the “Publish” button. You can even hide the post title, body, or permalink. This is a great alternative to plugins such as Adminimize.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Feditor-features\u002F\" rel=\"nofollow ugc\">Click here to learn about hiding editor features\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>WordPress has a feature called “metaboxes”. This is a strange name, but you have seen them often if you use WordPress. When a user edits a post, the edit screen has several default boxes: Status & visibility, Featured image, Categories, Tags, etc. These boxes are metaboxes. Plugins can add also add their own metaboxes. The Pro version of the PublishPress Capabilities plugin allows you to hide metaboxes for specific user roles.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fhide-metaboxes-in-wordpress-posts\u002F\" rel=\"nofollow ugc\">Click here to learn about hiding metaboxes\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Admin Features\u003C\u002Fh3>\n\u003Cp>Admin Features allows you to hide items in the WordPress admin area and toolbar. You can decide what users see in your WordPress dashboard. You can use this option to hide all the links in the toolbar including “About WordPress”, “Visit Site” and more. You can also hide dashboard widgets such as “At a Glance”, “Quick Draft”, and “WordPress Events and News”.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fadmin-features-screen\u002F\" rel=\"nofollow ugc\">Click here to learn about removing toolbar items and dashboard widgets\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Admin Styles\u003C\u002Fh3>\n\u003Cp>The Admin Styles feature allows you to customize the WordPress admin area with your own branding. You can change the color scheme and visual features for the admin screens. It’s also possible to have different settings for different user roles.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fadmin-styles\u002F\" rel=\"nofollow ugc\">Click here to learn about customizing the admin area with your own branding.\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Admin Menus (Pro version)\u003C\u002Fh3>\n\u003Cp>With PublishPress Capabilities you can edit all your admin menu links. You can also restrict access to admin menu screens by user roles. This is useful because many plugin do not have any way to control who can access their admin screens.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fadmin-menus-screen\u002F\" rel=\"nofollow ugc\">Click to see how to block Admin menu access\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Profile Features\u003C\u002Fh3>\n\u003Cp>“Profile Features” allows you to hide features in the “Profile” screen. You can decide what users see in their accounts.  This “Profile” area is used as a dumping ground for the settings of many different plugins.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fprofile-features\u002F\" rel=\"nofollow ugc\">Click here to learn about the Profile Features option\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Redirects\u003C\u002Fh3>\n\u003Cp>PublishPress Capabilities has a “Redirects” screen that allows you to control where users are sent before and after logging in to your site. There are four options available:\u003Cbr \u002F>\n* Login Redirect: Where users are sent when they log in.\u003Cbr \u002F>\n* Logout Redirect: Where users are sent when they log out.\u003Cbr \u002F>\n* Registration Redirect: Where users are sent when they register on your site.\u003Cbr \u002F>\n* First Login Redirect: Where users are sent when they log in to your site for the first time.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fredirects\u002F\" rel=\"nofollow ugc\">Click to see how to redirect users\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Frontend Features\u003C\u002Fh3>\n\u003Cp>The “Frontend Features” screen allows you to modify the features that show on the frontend of your website. You can choose to  hide IDs or classes, add CSS styles, or add body classes. All of these changes can be targeted to specific user roles.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Ffrontend-features\u002F\" rel=\"nofollow ugc\">Click here to learn about frontend changes\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Navigation Menu Restrictions\u003C\u002Fh3>\n\u003Cp>PublishPress Capabilities enables you to restrict access to navigation menus by roles, logged in and logged out users. This is useful because a default WordPress site does not give you way to control the visibility of your links.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fnav-menus\u002F\" rel=\"nofollow ugc\">Click to see how to block frontend menu access\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>User Testing \u002F User Switching\u003C\u002Fh3>\n\u003Cp>If you run a WordPress website which allows users to log in, you probably spend a lot of time answering account questions or solving website bugs for your users. Site administrators often have to browse their site and see exactly what the user sees. They need to test the user’s account without resetting their password. This is possible with PublishPress Capabilities.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fuser-testing\u002F\" rel=\"nofollow ugc\">Click here to learn about user testing\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Admin Notices\u003C\u002Fh3>\n\u003Cp>This feature helps organize messages and advertisements in your WordPress admin area. It helps remove clutter from your WordPress experience. This feature will organize all these admin notices into a new area in the top-right corner of your screen. This “Admin Notices” area will show all the notices in a clean, organized area. Nothing is changed about the notices so you can deal with them as normal. The only difference is that you won’t be pestered by these notices on your main admin dashboard.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fadmin-notices-feature\u002F\" rel=\"nofollow ugc\">Click here to learn about Admin Notices\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>PublishPress Capabilities is Safe to Use\u003C\u002Fh3>\n\u003Cp>PublishPress Capabilities is completely \u003Cstrong>safe to use\u003C\u002Fstrong>. Every time you change your site’s permissions, this plugin will take a backup that you can restore if anything goes wrong. You can use these backups to migrate your roles and permissions from one site to another.\u003C\u002Fp>\n\u003Cp>This security feature is also very helpful if you want to test out changes on your site, or if you’ve installed a new plugin that has changed your site’s permissions.\u003C\u002Fp>\n\u003Cp>Every time you change your permissions, the PublishPress Capabilities plugin will now automatically create a backup. If you make a mistake, go to the “Backup” menu link and you’ll be able to roll back to a previous version.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fbackup-restore-permissions\u002F\" rel=\"nofollow ugc\">Click here to see how to backup permissions\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Support for Media Library Permissions\u003C\u002Fh3>\n\u003Cp>PublishPress Capabilities enables you to decide who can upload, edit and delete files from your site’s Media Library. By default, only Administrators are able to delete files in your Media Library. Subscribers and Contributors are not even allowed to upload files. You can customize these permissions for the Media Library and also the Featured Image box.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fcontrol-media-library-access\u002F\" rel=\"nofollow ugc\">Click here to learn about Media Library permissions\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Support for WooCommerce Permissions\u003C\u002Fh3>\n\u003Cp>We mentioned earlier that PublishPress Capabilities has special support for WooCommerce taxonomies. This is true for the rest of WooCommerce also. With PublishPress Capabilities you can control permissions for WooCommerce products, orders and coupons.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fwoocommerce-permissons\u002F\" rel=\"nofollow ugc\">Click here to learn about WooCommerce permissions\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Support for WordPress Multisite\u003C\u002Fh3>\n\u003Cp>PublishPress Capabilities allows you to control permissions on a single site or across your whole network. Every time you update permissions in PublishPress Capabilities, you can choose to sync those changes across your multisite network.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fknowledge-base\u002Fmultisite-network\u002F\" rel=\"nofollow ugc\">Click here to learn about multisite permissions\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Join PublishPress and get the Pro plugins\u003C\u002Fh3>\n\u003Cp>The Pro versions of the PublishPress plugins are well worth your investment. The Pro versions have extra features and faster support. \u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">Click here to join PublishPress\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Join PublishPress and you’ll get access to these Pro plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fauthors\" rel=\"nofollow ugc\">PublishPress Authors Pro\u003C\u002Fa> allows you to add multiple authors and guest authors to WordPress posts.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fblocks\" rel=\"nofollow ugc\">PublishPress Blocks Pro\u003C\u002Fa> has everything you need to build professional websites with the WordPress block editor.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fcapabilities\" rel=\"nofollow ugc\">PublishPress Capabilities Pro\u003C\u002Fa> is the plugin to manage your WordPress user roles, permissions, and capabilities.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fchecklists\" rel=\"nofollow ugc\">PublishPress Checklists Pro\u003C\u002Fa> enables you to define tasks that must be completed before content is published.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Ffuture\" rel=\"nofollow ugc\">PublishPress Future Pro\u003C\u002Fa> is the plugin for scheduling changes to your posts.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fpermissions\" rel=\"nofollow ugc\">PublishPress Permissions Pro\u003C\u002Fa>  is the plugin for restricted content and advanced WordPress permissions.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fpublishpress\" rel=\"nofollow ugc\">PublishPress Planner Pro\u003C\u002Fa> is the plugin for managing and scheduling WordPress content.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Frevisions\" rel=\"nofollow ugc\">PublishPress Revisions Pro\u003C\u002Fa> allows you to update your published pages with teamwork and precision.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fseries\" rel=\"nofollow ugc\">PublishPress Series Pro\u003C\u002Fa> enables you to group content together into a series.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fshortlinks\" rel=\"nofollow ugc\">PublishPress Shortlinks Pro\u003C\u002Fa> allows you to create custom URLs for your posts and external links. \u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpublishpress.com\u002Fstatuses\" rel=\"nofollow ugc\">PublishPress Statuses Pro\u003C\u002Fa> enables you to create additional publishing steps for your posts.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Together, these plugins are a suite of powerful publishing tools for WordPress. If you need to create a professional workflow in WordPress, with moderation, revisions, permissions and more… then you should try PublishPress.\u003C\u002Fp>\n\u003Ch3>Bug Reports\u003C\u002Fh3>\n\u003Cp>Bug reports for PublishPress Capabilities are welcomed in our \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fpublishpress\u002Fpublishpress-capabilities\" rel=\"nofollow ugc\">repository on GitHub\u003C\u002Fa>. Please note that GitHub is not a support forum, and that issues that aren’t properly qualified as bugs will be closed.\u003C\u002Fp>\n","PublishPress Capabilities is the access control plugin. You can manage user capabilities, permissions, user roles, admin menus and more.",100000,3995173,142,"2026-04-13T18:11:00.000Z","6.9.4","5.5","7.2.5",[53,20,54,55,22],"admin-menus","permissions","user-role-editor","https:\u002F\u002Fpublishpress.com\u002Fcapability-manager\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcapability-manager-enhanced.2.42.0.zip",86,5,"2026-02-20 00:00:00",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":25,"num_ratings":71,"last_updated":72,"tested_up_to":49,"requires_at_least":73,"requires_php":16,"tags":74,"homepage":78,"download_link":79,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"editx","Admin Menu Editor, Admin Column Editor – EditX","0.2.2","SoftTent","https:\u002F\u002Fprofiles.wordpress.org\u002Fsofttent\u002F","\u003Cp>EditX gives WordPress administrators full control over the admin experience. Customize the admin menu layout, choose which columns appear in list tables, and restrict access to menu items for specific users or roles all from a clean, modern interface.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Admin Menu Editor\u003C\u002Fstrong>\u003Cbr \u002F>\nDrag and rearrange admin menu items, hide menus you don’t need, and reorder submenus to match your workflow. Changes are stored and applied on every page load.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Admin Column Editor\u003C\u002Fstrong>\u003Cbr \u002F>\nChoose exactly which columns appear in your admin list tables Posts, Pages, Media, Comments, Users, and all custom post types. Remove clutter and focus on the data that matters.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Addons\u003C\u002Fstrong>\u003Cbr \u002F>\nEach feature is a toggleable addon. Enable or disable Admin Menu Editor, Admin Column Editor, and Restrictions independently from the Addons screen.\u003C\u002Fp>\n\u003Ch3>Additional Information\u003C\u002Fh3>\n\u003Cp>For more information and updates, visit \u003Ca href=\"https:\u002F\u002Fsofttent.com\" rel=\"nofollow ugc\">https:\u002F\u002Fsofttent.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPL-2.0-or-later License.\u003C\u002Fp>\n","A powerful WordPress plugin to customize admin menus and admin columns with ease",10,464,1,"2026-03-13T00:28:00.000Z","6.2",[18,75,76,77,22],"admin-columns-editor","admin-menu-editor","table-column-editor","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Feditx","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feditx.0.2.2.zip",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":11,"downloaded":88,"rating":11,"num_ratings":11,"last_updated":89,"tested_up_to":90,"requires_at_least":91,"requires_php":92,"tags":93,"homepage":23,"download_link":96,"security_score":97,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":98},"admin-menu-restrictor","Admin Menu Restrictor","1.1","Ram Vaithia Nathan","https:\u002F\u002Fprofiles.wordpress.org\u002Framvaithia\u002F","\u003Cp>Admin Menu Restrictor is a lightweight WordPress plugin designed to simplify and secure the admin dashboard for non-administrator users. By default, the plugin restricts access to all admin menu items except for the \\”Posts\\” menu, ensuring that non-admin users can only access what they need. This helps streamline the interface, minimize confusion, and prevent unauthorized access to sensitive areas of the dashboard. The plugin is easy to use and works seamlessly with WordPress user roles and permissions.\u003C\u002Fp>\n","Restricts the WordPress admin menu for non-admin users, showing only the \\\"Posts\\\" menu to simplify the interface and enhance security.",962,"2024-11-26T15:18:00.000Z","6.7.5","5.0","5.6",[18,19,94,22,95],"restrict-menu","wordpress-admin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadmin-menu-restrictor.1.1.zip",92,"2026-04-06T09:54:40.288Z",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":45,"downloaded":107,"rating":108,"num_ratings":109,"last_updated":110,"tested_up_to":49,"requires_at_least":111,"requires_php":112,"tags":113,"homepage":23,"download_link":117,"security_score":118,"vuln_count":119,"unpatched_count":11,"last_vuln_date":120,"fetched_at":27},"advanced-access-manager","Advanced Access Manager – Access Governance for WordPress","7.1.0","AAM Plugin","https:\u002F\u002Fprofiles.wordpress.org\u002Fvasyltech\u002F","\u003Cp>\u003Cstrong>Advanced Access Manager (AAM)\u003C\u002Fstrong> introduces \u003Cstrong>Access Governance for WordPress\u003C\u002Fstrong> – a systematic approach to securing your site by controlling who can access what, when, and why.\u003C\u002Fp>\n\u003Cp>Most WordPress security plugins focus on external threats like malware, firewalls, and brute-force attacks. AAM addresses the \u003Cstrong>root cause of the #1 WordPress security risk: broken access controls, excessive privileges, and misconfigured roles\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Instead of reacting to attacks, AAM helps you \u003Cstrong>design security into your WordPress site\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch4>What Access Governance means in practice\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Mitigate Broken Access Controls\u003C\u002Fstrong>. Ensure roles, users, and permissions are correctly configured to prevent unauthorized actions and privilege escalation.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Eliminate Excessive Privileges\u003C\u002Fstrong>. Identify overpowered users and reduce access to critical functionality, admin areas, and APIs.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Secure Content by Design\u003C\u002Fstrong>. Control who can view, edit, publish, or delete posts, pages, media, taxonomies, and custom content types.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Govern Access with Policy\u003C\u002Fstrong>. Define access rules using JSON Access Policies — portable, auditable, and automation-friendly.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Build Custom Security Logic\u003C\u002Fstrong>. Use the AAM PHP Framework to create advanced, programmatic access controls tailored to your application.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Security Audit\u003C\u002Fstrong>. Detect risky role assignments, misconfigurations, and compromised accounts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Granular Access Control\u003C\u002Fstrong>. Manage permissions for any user, role, or visitor with precision.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Role & Capability Management\u003C\u002Fstrong>. Customize WordPress roles and capabilities beyond defaults.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin & Menu Control\u003C\u002Fstrong>. Restrict dashboard areas and tailor the admin experience per user or role.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>API & Endpoint Protection\u003C\u002Fstrong>. Secure REST and XML-RPC access with fine-grained controls.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Modern Authentication Options\u003C\u002Fstrong>. Support passwordless and secure login flows.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Developer-Ready Framework\u003C\u002Fstrong>. Extend WordPress security using AAM’s powerful SDK.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ad-Free & Transparent\u003C\u002Fstrong>. – No ads, no tracking, no bloat.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Built for Security-Conscious WordPress Users\u003C\u002Fh4>\n\u003Cp>AAM is trusted by \u003Cstrong>150,000+ websites\u003C\u002Fstrong> to deliver enterprise-grade access control without unnecessary complexity. Whether you’re a site owner, agency, developer, or security professional, AAM gives you \u003Cstrong>full control over WordPress access — by design\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Most core features are free. Advanced capabilities are available via premium add-ons.\u003C\u002Fp>\n\u003Cp>No hidden tracking. No data collection. No unwanted changes.\u003Cbr \u002F>\nJust \u003Cstrong>security you can reason about, audit, and trust\u003C\u002Fstrong>.\u003C\u002Fp>\n","Access Governance for WordPress. Control roles, users, content, admin areas, and APIs to prevent broken access controls and excessive privileges.",7412197,84,420,"2026-03-08T15:53:00.000Z","5.8.0","5.6.0",[114,115,116,21,22],"access-governance","api-security","restricted-content","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadvanced-access-manager.7.1.0.zip",95,11,"2024-03-20 00:00:00",{"slug":122,"name":123,"version":124,"author":125,"author_profile":126,"description":127,"short_description":128,"active_installs":129,"downloaded":130,"rating":58,"num_ratings":34,"last_updated":131,"tested_up_to":14,"requires_at_least":15,"requires_php":132,"tags":133,"homepage":137,"download_link":138,"security_score":139,"vuln_count":32,"unpatched_count":11,"last_vuln_date":140,"fetched_at":27},"restrict-user-access","Restrict User Access – Ultimate Membership & Content Protection","2.8","Joachim Jensen","https:\u002F\u002Fprofiles.wordpress.org\u002Fintoxstudio\u002F","\u003Cp>\u003Cstrong>Restrict User Access is a fast and simple Membership Plugin for WordPress. Restrict your content in minutes, NOT hours.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Quickly set up a paid membership site where your users can get different levels such as Platinum, Gold, or Free. Then, grant those levels when a user purchases a product in WooCommerce.\u003C\u002Fp>\n\u003Ch3>👥 Unlimited Access Levels\u003C\u002Fh3>\n\u003Cp>Users can have multiple levels, and you control how long memberships should last. When unauthorized users try to access restricted content, you can redirect them to another URL or display a teaser.\u003C\u002Fp>\n\u003Ch3>⚡ Level Membership Automations\u003C\u002Fh3>\n\u003Cp>Automatically add levels to your users based on something they do (Triggers) or something they are (Traits):\u003C\u002Fp>\n\u003Cul>\n\u003Cli>User Registration\u003C\u002Fli>\n\u003Cli>User Roles\u003C\u002Fli>\n\u003Cli>Logged-in or Guests\u003C\u002Fli>\n\u003Cli>WooCommerce Purchases\u003C\u002Fli>\n\u003Cli>Easy Digital Downloads Purchases\u003C\u002Fli>\n\u003Cli>BuddyPress Member Types\u003C\u002Fli>\n\u003Cli>GiveWP Donations\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🔒 Contextual Content Protection\u003C\u002Fh3>\n\u003Cp>Prevent unauthorized users from visiting your posts, pages, or categories. You can even combine the conditions: protect all posts tagged “Premium” written by a select author.\u003C\u002Fp>\n\u003Cp>The following Access Conditions are available out of the box:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Posts, Pages & Custom Post Types\u003C\u002Fli>\n\u003Cli>Content with Tags, Categories, or Custom Taxonomies\u003C\u002Fli>\n\u003Cli>Content written by select Authors\u003C\u002Fli>\n\u003Cli>Page Templates\u003C\u002Fli>\n\u003Cli>Blog Page & Post Type Archives\u003C\u002Fli>\n\u003Cli>Author Archives\u003C\u002Fli>\n\u003Cli>Taxonomy Archives\u003C\u002Fli>\n\u003Cli>Front Page, Search Results, 404 Not Found Page\u003C\u002Fli>\n\u003Cli>bbPress Profiles, Forums & Topics\u003C\u002Fli>\n\u003Cli>BuddyPress Profile Sections\u003C\u002Fli>\n\u003Cli>Languages (Polylang, qTranslate X, TranslatePress, Transposh, Weglot, WPML)\u003C\u002Fli>\n\u003Cli>Pods Pages\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Note that Access Conditions do not apply to content displayed in lists.\u003C\u002Fp>\n\u003Ch3>✅ Grant & Deny Capabilities\u003C\u002Fh3>\n\u003Cp>The easy-to-use WordPress User Manager gives you full control over the capabilities the members should or shouldn’t have. Access Level Capabilities will override the permissions set by roles or other plugins.\u003C\u002Fp>\n\u003Ch3>👁️ Hide Admin Bar & Nav Menu Visibility\u003C\u002Fh3>\n\u003Cp>Disable the admin bar for select levels and control what menu items members can see. You can even hide any widget area created with \u003Ca href=\"https:\u002F\u002Fdev.institute\u002Fwordpress-sidebars\u002F?utm_source=readme&utm_medium=referral&utm_content=section&utm_campaign=rua\" rel=\"nofollow ugc\">Content Aware Sidebars\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>🤖 Restrict Content from Other Plugins\u003C\u002Fh3>\n\u003Cp>Restrict User Access autodetects Custom Post Types and Taxonomies created by any plugin or theme. Built-in support for some of the most popular WordPress plugins means that you e.g. can restrict access to bbPress forums or multilingual content.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>bbPress\u003C\u002Fli>\n\u003Cli>BuddyPress\u003C\u002Fli>\n\u003Cli>Easy Digital Downloads\u003C\u002Fli>\n\u003Cli>Pods\u003C\u002Fli>\n\u003Cli>Polylang\u003C\u002Fli>\n\u003Cli>TranslatePress\u003C\u002Fli>\n\u003Cli>WooCommerce\u003C\u002Fli>\n\u003Cli>Weglot\u003C\u002Fli>\n\u003Cli>WPML\u003C\u002Fli>\n\u003Cli>and more …\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🛡️ WordPress Security Enhancements\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>WP REST API Content Protection\u003C\u002Fstrong>\u003Cbr \u002F>\nEnforces PoLA to minimize attack surfaces and stop threat actors from harvesting your data\u003C\u002Fli>\n\u003Cli>\u003Cstrong>How to display content in lists\u003C\u002Fstrong>\u003Cbr \u002F>\nDisplay excerpts only or hide content when post types are displayed in blog, archives, search results, lists, etc.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>📑 Restrict Content with Shortcodes\u003C\u002Fh3>\n\u003Cp>Fine-tune content visibility in your posts or pages by adding simple shortcodes:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[restrict level=\"platinum\"]\nThis content can only be seen by users with Platinum level or above.\n[\u002Frestrict]\n\n[restrict level=\"!platinum\"]\nThis content can only be seen by users without Platinum level or above.\n[\u002Frestrict]\n\n[restrict role=\"editor,contributor\" page=\"1\"]\nThis content can only be seen by editors and contributors.\nOther users will see content from page with ID 1.\n[\u002Frestrict]\n\n[login-form]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch3>👋 Developer-friendly API\u003C\u002Fh3>\n\u003Cp>Restrict User Access makes it super easy for developers to programmatically customize WordPress access control by adding a few lines of code to theme templates.\u003C\u002Fp>\n\u003Ch4>Example – Add level to current user\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>rua_get_user()->add_level($level_id);\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Example – Check if current user has an active level membership\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>if(rua_get_user()->has_level($level_id)) {\n    \u002F\u002Fshow restricted content\n} else {\n    \u002F\u002Fshow content if unauthorized\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fdev.institute\u002Fdocs\u002Frestrict-user-access\u002Fdeveloper-api\u002F?utm_source=readme&utm_medium=referral&utm_content=section&utm_campaign=rua\" rel=\"nofollow ugc\">View full RUA PHP API documentation here.\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>🎛️ Premium Add-ons for Restrict User Access\u003C\u002Fh3>\n\u003Cp>Complete your WordPress membership site with these powerful extensions\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fdev.institute\u002Fproducts\u002Fcategory\u002Frestrict-user-access\u002F?utm_source=readme&utm_medium=referral&utm_content=acf&utm_campaign=rua\" rel=\"nofollow ugc\">ACF Restriction\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nRestrict content that contain data from Advanced Custom Fields plugin\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fdev.institute\u002Fproducts\u002Fcategory\u002Frestrict-user-access\u002F?utm_source=readme&utm_medium=referral&utm_content=date&utm_campaign=rua\" rel=\"nofollow ugc\">Date Restriction\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nRestrict content based on the time it was published\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fdev.institute\u002Fproducts\u002Fcategory\u002Frestrict-user-access\u002F?utm_source=readme&utm_medium=referral&utm_content=metabox&utm_campaign=rua\" rel=\"nofollow ugc\">Meta Box Restriction\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nRestrict content that contain data from Meta Box plugin\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fdev.institute\u002Fproducts\u002Fcategory\u002Frestrict-user-access\u002F?utm_source=readme&utm_medium=referral&utm_content=timelock&utm_campaign=rua\" rel=\"nofollow ugc\">Timelock\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nDetermine when to enable or disable select Access Conditions\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fdev.institute\u002Fproducts\u002Fcategory\u002Frestrict-user-access\u002F?utm_source=readme&utm_medium=referral&utm_content=url&utm_campaign=rua\" rel=\"nofollow ugc\">URL Restriction\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nRestrict content based on the WordPress URL, with wildcard support\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fdev.institute\u002Fproducts\u002Fcategory\u002Frestrict-user-access\u002F?utm_source=readme&utm_medium=referral&utm_content=visibility&utm_campaign=rua\" rel=\"nofollow ugc\">Visibility Control\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nHide content from blog, search results, archives, custom lists, WP REST API, and more\u003C\u002Fli>\n\u003C\u002Ful>\n","Create Access Levels and restrict any post, page, category, etc. Supports bbPress, BuddyPress, WooCommerce, WPML, and more.",10000,619496,"2025-10-06T06:48:00.000Z","7.2",[18,134,20,135,136],"bbpress","content-restriction","membership","https:\u002F\u002Fdev.institute\u002Fwordpress-memberships\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frestrict-user-access.2.8.zip",99,"2024-03-18 00:00:00",{"attackSurface":142,"codeSignals":180,"taintFlows":195,"riskAssessment":223,"analyzedAt":226},{"hooks":143,"ajaxHandlers":176,"restRoutes":177,"shortcodes":178,"cronEvents":179,"entryPointCount":11,"unprotectedCount":11},[144,150,154,158,160,164,168,171,173],{"type":145,"name":146,"callback":147,"file":148,"line":149},"action","admin_menu","rolematrix_gw_add_admin_menu","rolematrix-gw.php",79,{"type":145,"name":151,"callback":152,"file":148,"line":153},"admin_init","rolematrix_gw_handle_form_actions",80,{"type":145,"name":146,"callback":155,"priority":156,"file":148,"line":157},"rolematrix_gw_apply_menu_restrictions",999,83,{"type":145,"name":151,"callback":159,"file":148,"line":108},"rolematrix_gw_apply_page_access_restrictions",{"type":145,"name":161,"callback":162,"file":148,"line":163},"admin_notices","rolematrix_gw_show_admin_notices",87,{"type":145,"name":165,"callback":166,"file":148,"line":167},"admin_enqueue_scripts","enqueue_admin_assets",90,{"type":145,"name":169,"callback":170,"file":148,"line":34},"activated_plugin","flush_capabilities_cache",{"type":145,"name":172,"callback":170,"file":148,"line":118},"deactivated_plugin",{"type":145,"name":174,"callback":170,"file":148,"line":175},"after_switch_theme",96,[],[],[],[],{"dangerousFunctions":181,"sqlUsage":182,"outputEscaping":184,"fileOperations":11,"externalRequests":11,"nonceChecks":59,"capabilityChecks":193,"bundledLibraries":194},[],{"prepared":11,"raw":11,"locations":183},[],{"escaped":185,"rawEcho":32,"locations":186},131,[187,191],{"file":188,"line":189,"context":190},"includes\u002Fadmin-pages.php",460,"raw output",{"file":188,"line":192,"context":190},488,6,[],[196,215],{"entryPoint":197,"graph":198,"unsanitizedCount":11,"severity":214},"rolematrix_gw_render_caps_page (includes\u002Fadmin-pages.php:307)",{"nodes":199,"edges":211},[200,205],{"id":201,"type":202,"label":203,"file":188,"line":204},"n0","source","$_GET",315,{"id":206,"type":207,"label":208,"file":188,"line":209,"wp_function":210},"n1","sink","echo() [XSS]",364,"echo",[212],{"from":201,"to":206,"sanitized":213},true,"low",{"entryPoint":216,"graph":217,"unsanitizedCount":11,"severity":214},"\u003Cadmin-pages> (includes\u002Fadmin-pages.php:0)",{"nodes":218,"edges":221},[219,220],{"id":201,"type":202,"label":203,"file":188,"line":204},{"id":206,"type":207,"label":208,"file":188,"line":209,"wp_function":210},[222],{"from":201,"to":206,"sanitized":213},{"summary":224,"deductions":225},"The rolematrix-gw v1.0.1 plugin exhibits a strong security posture based on the provided static analysis. The plugin has no identified attack surface through common entry points like AJAX, REST API, shortcodes, or cron events. Furthermore, the code demonstrates excellent security practices, with all SQL queries utilizing prepared statements and a very high percentage of output being properly escaped. The presence of nonce and capability checks further reinforces its secure design principles.\n\nThe taint analysis reveals no critical or high-severity flows with unsanitized paths, indicating that user-controlled input is not being mishandled in a way that would lead to common web vulnerabilities like SQL injection or XSS. The plugin also has no history of known vulnerabilities, which is a positive indicator of its development quality and ongoing maintenance.\n\nOverall, rolematrix-gw v1.0.1 appears to be a very secure plugin. The lack of attack surface, robust code practices, and absence of past vulnerabilities contribute to a low-risk profile. The primary strength lies in its proactive approach to security by minimizing entry points and diligently employing security best practices in its code.",[],"2026-04-16T13:41:53.593Z",{"wat":228,"direct":237},{"assetPaths":229,"generatorPatterns":232,"scriptPaths":233,"versionParams":234},[230,231],"\u002Fwp-content\u002Fplugins\u002Frolematrix-gw\u002Fassets\u002Fcss\u002Frolematrix-gw-admin.css","\u002Fwp-content\u002Fplugins\u002Frolematrix-gw\u002Fassets\u002Fjs\u002Frolematrix-gw-admin.js",[],[231],[235,236],"rolematrix-gw\u002Fassets\u002Fcss\u002Frolematrix-gw-admin.css?ver=","rolematrix-gw\u002Fassets\u002Fjs\u002Frolematrix-gw-admin.js?ver=",{"cssClasses":238,"htmlComments":239,"htmlAttributes":240,"restEndpoints":241,"jsGlobals":242,"shortcodeOutput":243},[],[],[],[],[],[],{"error":213,"url":245,"statusCode":246,"statusMessage":247,"message":247},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Frolematrix-gw\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":32,"versions":249},[250,256],{"version":6,"download_url":24,"svn_tag_url":251,"released_at":26,"has_diff":252,"diff_files_changed":253,"diff_lines":26,"trac_diff_url":254,"vulnerabilities":255,"is_current":213},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Frolematrix-gw\u002Ftags\u002F1.0.1\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Frolematrix-gw%2Ftags%2F1.0.0&new_path=%2Frolematrix-gw%2Ftags%2F1.0.1",[],{"version":257,"download_url":258,"svn_tag_url":259,"released_at":26,"has_diff":252,"diff_files_changed":260,"diff_lines":26,"trac_diff_url":26,"vulnerabilities":261,"is_current":252},"1.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frolematrix-gw.1.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Frolematrix-gw\u002Ftags\u002F1.0.0\u002F",[],[]]